Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
File:                     1eglbE9iHYxMFwZl6HjqiOy7P1E.mft (raw, json)
Hash identifier:          Shjs1oiD+JDJr5BcXAe27/BSo+B+CzvVlfo/e6wJQRw=
Subject key identifier:   2C:F5:82:AC:D8:4F:9C:00:00:93:02:15:82:59:99:E7:E4:8F:CB:7B
Authority key identifier: D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
Certificate issuer:       /CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Certificate serial:       01A13F02B6678CBAB7C1C18CEB153320B358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 10:01:44 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:44 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:44 +0000
Files and hashes:         1: 1eglbE9iHYxMFwZl6HjqiOy7P1E.crl (hash: 2T68miKL8u5nkBRJ1SwqVBW5HPQdhsGSedLiL7zK3TM=)
                          2: X2pe7oZC92-YhI0Wjlbt7Or5j3U.roa (hash: FFDTmh8Q3nrNL2M4JqNRzlrW4SSQct1GaW84BBkxSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:b6:67:8c:ba:b7:c1:c1:8c:eb:15:33:20:b3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
        Validity
            Not Before: Oct 15 10:01:44 2026 GMT
            Not After : Oct 16 10:01:44 2026 GMT
        Subject: CN=2cf582acd84f9c0000930215825999e7e48fcb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:63:7c:a9:ac:26:4d:f5:c3:c5:af:92:89:
                    1a:0a:e7:6a:95:0d:40:ff:de:1a:5a:e5:f4:25:74:
                    b3:af:f3:ae:70:9b:2d:fd:9a:5e:2a:27:2a:ed:15:
                    d8:c9:89:65:73:c9:47:31:f7:a8:50:a9:25:65:e5:
                    45:c4:44:90:4e:30:23:27:44:9c:f2:0b:ed:81:78:
                    eb:10:2f:38:1b:f8:4e:c3:e3:96:24:5c:d8:46:b3:
                    95:25:8f:13:6d:16:f6:e1:1b:0a:05:e0:94:ef:0f:
                    53:a4:41:45:fa:af:b5:e8:e8:ee:4f:84:19:8d:69:
                    93:c7:99:68:46:68:14:1e:51:7f:ea:21:e0:48:36:
                    0c:55:18:4f:b1:5b:9d:79:85:2c:5d:65:0b:4f:85:
                    a8:27:61:10:34:c3:b6:2a:a5:4e:55:43:be:2a:2f:
                    e4:c1:7c:be:2f:c4:6f:cd:93:78:2a:95:4d:c2:a9:
                    73:20:91:ab:44:79:41:71:a6:3a:9e:54:4e:f5:63:
                    c2:31:4a:d3:c1:ff:87:54:ec:4a:90:31:61:e0:9e:
                    3a:8d:c7:fa:f6:1e:62:d6:ab:97:f7:51:91:18:8b:
                    42:4d:5d:4b:cf:d8:1c:b5:48:33:46:6a:44:6d:5c:
                    3c:a4:f4:f6:d3:1a:df:27:6b:87:dc:4f:e4:5b:5c:
                    33:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F5:82:AC:D8:4F:9C:00:00:93:02:15:82:59:99:E7:E4:8F:CB:7B
            X509v3 Authority Key Identifier:
                keyid:D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5f:c8:96:64:e8:c1:dd:28:62:1d:d3:22:dd:12:b8:b5:2c:
         c3:80:d4:05:24:dc:fe:02:2e:aa:d3:2e:56:19:16:53:2b:64:
         6e:c9:d0:eb:c9:0c:d6:3e:ed:38:63:5d:f6:2e:da:a1:e3:22:
         fd:f4:3a:9a:37:7a:b9:d7:e8:3c:0e:58:ca:32:72:81:e0:54:
         14:bb:c6:75:ff:0d:73:55:de:1d:69:b5:82:55:f8:81:b8:cc:
         7a:88:b6:06:5a:57:1d:28:e4:9b:e2:43:69:b7:08:f0:c7:89:
         79:79:25:66:94:b8:37:3d:ed:7c:19:d3:6c:dd:0d:3b:d8:cc:
         ff:ce:09:a3:23:a7:86:a8:fb:c2:10:56:a8:ce:41:3b:77:f2:
         41:e7:14:a3:52:5c:c3:f7:f7:62:43:18:6f:78:d8:ca:a2:56:
         bf:7a:82:5a:6a:78:1b:bd:39:23:fa:ec:43:dc:59:7a:f5:70:
         4b:3b:b1:35:65:3a:2b:cb:23:99:5d:b4:a6:b0:19:46:56:bd:
         9b:8e:7e:99:f7:d4:b3:87:fc:1b:81:18:11:67:b0:d1:b1:92:
         56:b7:11:a5:48:b2:a6:77:88:6c:59:33:e2:62:3a:3f:f2:60:
         7e:b8:a4:e9:e9:50:a0:8f:c2:61:f5:74:50:6a:33:49:8e:39:
         20:66:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:26:22 2026 by rpki-client